EUVD-2014-5607

Malware in sbrugna...

Bike Race Free Motorcycle Game - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Bike Race Free Motorcycle Game published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

The Bike Race Free - Top Free Game aka com.topfreegames.bikeracefreeworld application 4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5720

The Bike Race Free - Top Free Game aka com.topfreegames.bikeracefreeworld application 4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5720

The CVE-2014-5720 entry covers the Android app Bike Race Free - Top Free Game (package com.topfreegames.bikeracefreeworld), version 4.3, which does not verify X.509 certificates from SSL servers. This improper certificate validation enables man-in-the-middle attackers to spoof servers and obtain ...